Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe5b490e01916025ea9800035a06ad620448a40.cer
File:                     9fe5b490e01916025ea9800035a06ad620448a40.cer (raw, json)
Hash identifier:          OXCBrtBpYWnED/DB48F4Y3Pn7l6vKHh0Mrbo1lxQ9V8=
Subject key identifier:   26:87:E1:88:0A:7B:5F:53:A0:05:E3:90:14:F7:4B:40:18:74:16:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F55579
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/40ffbe0b-779c-4015-8ba7-12a85f779e86/9fe5b490e01916025ea9800035a06ad620448a40.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/40ffbe0b-779c-4015-8ba7-12a85f779e86/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Nov 2019 15:20:31 +0000
Certificate not after:    Sun 15 Sep 2024 15:15:40 +0000
Subordinate resources:    IP: 45.188.232.0/22
                          IP: 2803:3f60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16078201 (0xf55579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 18 15:20:31 2019 GMT
            Not After : Sep 15 15:15:40 2024 GMT
        Subject: CN=9fe5b490e01916025ea9800035a06ad620448a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:64:bd:6c:df:59:60:3f:d3:a0:95:5a:83:
                    b2:02:ef:e1:44:1c:90:2f:da:62:05:17:42:99:8c:
                    18:be:c4:88:2d:ca:76:f3:cd:97:88:12:06:e3:fe:
                    b2:86:5a:bc:5d:d3:a4:1a:56:97:ef:85:3f:fb:e8:
                    8d:f4:1d:a2:3b:23:5c:ed:02:bc:e8:21:8a:59:2c:
                    22:9b:75:ce:80:70:78:97:e3:6e:17:4b:62:a2:48:
                    0f:38:ac:00:d9:0c:3e:50:18:f1:94:8e:c9:5e:fe:
                    84:b9:a6:32:40:ac:01:98:6d:73:7b:63:11:8e:dc:
                    1b:92:ac:9e:7d:91:98:24:32:59:d5:62:ef:75:16:
                    2c:23:62:44:39:ff:ca:0a:f3:05:dc:21:ba:76:dd:
                    d8:e4:3e:b3:05:ec:cf:6e:5a:fd:c4:8a:d6:b1:b6:
                    9e:c3:51:85:cc:b0:6e:df:65:68:47:c5:8e:93:ec:
                    a2:2a:a7:cc:c7:9d:84:ec:90:0f:b3:31:5e:fe:3d:
                    3f:10:db:b1:42:c4:a5:06:13:4d:16:2a:59:75:1d:
                    ab:a2:23:5d:7e:7f:6f:ba:16:8d:3d:7b:c2:93:6b:
                    63:84:d8:ef:09:21:6a:7b:a1:8f:76:56:1d:ef:9f:
                    62:ec:4b:dd:97:8f:3d:8c:4f:d9:e0:a3:ae:28:d1:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:87:E1:88:0A:7B:5F:53:A0:05:E3:90:14:F7:4B:40:18:74:16:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/40ffbe0b-779c-4015-8ba7-12a85f779e86/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/40ffbe0b-779c-4015-8ba7-12a85f779e86/9fe5b490e01916025ea9800035a06ad620448a40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.232.0/22
                IPv6:
                  2803:3f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:82:56:b1:a1:d0:23:f1:6c:9b:d8:6f:7f:72:19:cf:37:36:
         b0:e5:7c:44:2e:45:ac:97:39:85:c8:55:0b:a5:7d:c4:9a:c0:
         23:b4:4f:8f:d1:54:58:7a:ff:bb:ac:f5:b7:9f:1d:45:0b:01:
         b2:f6:96:5f:d6:86:37:10:2d:a4:4e:8b:2c:db:1f:a1:c0:fd:
         fa:a4:c4:fe:a1:2a:fd:8a:8e:69:99:d9:f5:fb:b7:b2:7c:76:
         1d:97:fb:53:b2:94:18:75:0d:d8:d5:ea:3d:34:04:0b:42:d3:
         a9:19:aa:cc:9e:d9:2a:02:b5:4a:9a:25:37:39:10:3a:67:a8:
         11:8d:cd:1a:18:50:5d:af:24:45:d6:c8:4c:e7:39:2c:19:55:
         cc:a7:58:74:8d:7e:7e:bc:9c:28:9f:4e:e4:5a:64:e3:c3:65:
         24:58:89:56:f0:0b:c6:37:90:70:6b:e9:4a:b0:83:d5:e0:7b:
         3c:60:41:30:56:f8:8a:3f:85:9d:fb:92:7b:4b:0b:81:b7:ad:
         35:cb:6a:bc:52:2f:6d:0e:1a:0c:cd:2b:de:62:31:5d:b1:bd:
         44:c0:8f:16:71:82:69:5b:8a:9c:0e:27:b7:94:9f:ab:fa:49:
         09:65:43:e4:60:27:a5:02:d3:05:bf:c0:fd:9f:1b:8f:4a:9c:
         24:20:85:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----